必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Telkom SA Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
445/tcp
[2019-08-02]1pkt
2019-08-03 07:13:49
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.228.169.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4134
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.228.169.45.			IN	A

;; AUTHORITY SECTION:
.			1009	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080202 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 07:13:43 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
45.169.228.105.in-addr.arpa domain name pointer 105-228-169-45.south.dsl.telkomsa.net.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
45.169.228.105.in-addr.arpa	name = 105-228-169-45.south.dsl.telkomsa.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
61.174.171.62 attackbotsspam
SSH login attempts brute force.
2020-09-18 18:56:34
114.35.28.55 attackbots
Port Scan detected!
...
2020-09-18 18:48:16
64.225.14.25 attackspambots
none
2020-09-18 18:54:15
78.96.147.168 attack
Automatic report - Port Scan Attack
2020-09-18 19:13:21
89.248.168.217 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-09-18 18:49:15
41.72.197.182 attackspambots
$f2bV_matches
2020-09-18 19:20:44
69.10.62.13 attackspambots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-18 19:02:16
198.245.50.81 attack
B: Abusive ssh attack
2020-09-18 19:12:23
106.54.242.239 attack
2020-09-18T05:47:18.165683vps-d63064a2 sshd[5673]: User root from 106.54.242.239 not allowed because not listed in AllowUsers
2020-09-18T05:47:20.356837vps-d63064a2 sshd[5673]: Failed password for invalid user root from 106.54.242.239 port 45888 ssh2
2020-09-18T05:49:15.579443vps-d63064a2 sshd[5681]: User root from 106.54.242.239 not allowed because not listed in AllowUsers
2020-09-18T05:49:15.597531vps-d63064a2 sshd[5681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.242.239  user=root
2020-09-18T05:49:15.579443vps-d63064a2 sshd[5681]: User root from 106.54.242.239 not allowed because not listed in AllowUsers
2020-09-18T05:49:17.830757vps-d63064a2 sshd[5681]: Failed password for invalid user root from 106.54.242.239 port 58538 ssh2
...
2020-09-18 18:53:45
143.255.8.2 attackspambots
Sep 18 12:24:43 nextcloud sshd\[19214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.8.2  user=root
Sep 18 12:24:44 nextcloud sshd\[19214\]: Failed password for root from 143.255.8.2 port 38986 ssh2
Sep 18 12:29:27 nextcloud sshd\[24682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.8.2  user=root
2020-09-18 18:53:28
45.185.164.135 attackspambots
Automatic report - Port Scan Attack
2020-09-18 18:52:55
132.232.98.228 attackbotsspam
Sep 17 18:51:40 HOST sshd[26998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.98.228  user=r.r
Sep 17 18:51:42 HOST sshd[26998]: Failed password for r.r from 132.232.98.228 port 38222 ssh2
Sep 17 18:51:42 HOST sshd[26998]: Received disconnect from 132.232.98.228: 11: Bye Bye [preauth]
Sep 17 18:54:10 HOST sshd[27115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.98.228  user=r.r
Sep 17 18:54:12 HOST sshd[27115]: Failed password for r.r from 132.232.98.228 port 33238 ssh2
Sep 17 18:54:13 HOST sshd[27115]: Received disconnect from 132.232.98.228: 11: Bye Bye [preauth]
Sep 17 18:56:34 HOST sshd[27231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.98.228  user=r.r
Sep 17 18:56:36 HOST sshd[27231]: Failed password for r.r from 132.232.98.228 port 56476 ssh2
Sep 17 18:56:38 HOST sshd[27231]: Received disconnect from 132.232.........
-------------------------------
2020-09-18 19:17:56
107.189.11.160 attackbotsspam
TCP port : 22
2020-09-18 19:08:59
198.245.61.217 attack
198.245.61.217 - - [18/Sep/2020:06:59:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.245.61.217 - - [18/Sep/2020:07:18:24 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-18 19:26:20
167.71.177.236 attackspam
Sep 18 10:12:17 124388 sshd[31622]: Failed password for invalid user servercsgo from 167.71.177.236 port 52966 ssh2
Sep 18 10:15:57 124388 sshd[31758]: Invalid user gratia from 167.71.177.236 port 36428
Sep 18 10:15:57 124388 sshd[31758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.177.236
Sep 18 10:15:57 124388 sshd[31758]: Invalid user gratia from 167.71.177.236 port 36428
Sep 18 10:16:00 124388 sshd[31758]: Failed password for invalid user gratia from 167.71.177.236 port 36428 ssh2
2020-09-18 18:56:03

最近上报的IP列表

109.112.47.235 217.61.0.236 136.243.64.152 52.174.52.33
182.132.98.77 122.157.63.199 134.209.114.236 41.75.122.30
193.56.28.204 143.216.75.40 29.165.154.153 54.214.145.142
64.100.148.96 201.184.2.18 34.76.170.65 62.210.11.172
201.86.168.252 93.79.79.205 113.229.105.12 200.29.234.86